258 matches found
WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to PHP Object Injection
Software Master Slider Pro Type Plugin Vulnerable versions = 3.6.5 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-47507 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 6df26bc223e4 Credits Rafie Muhammad Patchstack Required...
WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to SQL Injection
Software Master Slider Pro Type Plugin Vulnerable versions = 3.6.5 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-47506 Patch priority High CVSS severity High 7.6 Developer Claim ownership PSID c8ae4f7ba318 Credits Rafie Muhammad Patchstack Required privilege...
WordPress Master Slider plugin <= 3.7.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Vulnerability-Lab in WordPress Master Slider plugin versions = 3.7.0. Solution Update the WordPress Master Slider plugin to the latest available version at least 3.7.1...
CVE-2018-20368
The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback...
CVE-2018-20368
The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback...
CVE-2018-20368
The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback...
CVE-2018-20368
CVE-2018-20368 affects the WordPress Master Slider plugin (versions around 3.2.7 and 3.5.1) and causes an XSS via the wp-admin/admin-ajax.php Name input field in the MSPanel.Settings value during Callback. The connected sources consistently describe it as a cross‑site scripting vulnerability in M...
CVE-2018-20368: Improper Neutralization of Input During Web Page Generation
The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback...
PT-2018-15324
Name of the Vulnerable Software and Affected Versions Master Slider plugin versions 3.2.7 and 3.5.1 Description The issue concerns a problem with the Master Slider plugin for WordPress. It is related to XSS via the "Name" input field of the MSPanel.Settings value on Callback, which is accessible...
WordPress Plugin WP Master Slider Cross-Site Scripting Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin WP Master Slider version v3.5.1, which can be exploited by an...
Master Slider <= 3.7.0 - Authenticated Stored Cross-Site Scripting (XSS)
The plugin does not properly sanitise the slider name when creating or editing a slider, leading to an Authenticated editor+ Stored Cross-Site Scripting issue which will be triggered in the Slider table /wp-admin/admin.php?page=master-slider. Edit WPScanTeam: - The original report was from 2018,...
WP Master Slider v3.5.1 - Cross Site Scripting Vulnerability
Document Title: =============== WP Master Slider v3.5.1 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2158 Reference: https://wordpress.org/support/?posttype=topic&p=10874555...
Master Slider <= 3.7.0 - Authenticated Stored Cross-Site Scripting (XSS)
The plugin does not properly sanitise the slider name when creating or editing a slider, leading to an Authenticated editor+ Stored Cross-Site Scripting issue which will be triggered in the Slider table /wp-admin/admin.php?page=master-slider. Edit WPScanTeam: - The original report was from 2018,...
Master Slider <= 2.7.1 - Reflected Cross-Site Scripting (XSS)
The Master Slider – Responsive Touch Slider WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...
WordPress Master Slider Plugin <= 2.7.1 - Reflected Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Upgrade this plugin...
WordPress Master Slider 2.7.1 Cross Site Scripting
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Master Slider WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...